Eleytt Research ER-03-2012

["Michal Bucko" <michal.bucko () eleytt com>]

Eleytt Research
www.eleytt.com


Overview:
====================
Michal A. Bucko


Credit:
====================
Anonymous researcher
Michal A. Bucko




Vulnerability Table
===================

Note: All of the vulnerabilities are reported in Holdem Manager Professional,
 poker tracking
software.

1. Holdem Manager 1.11 "Concat" Session Module Memory Corruption
2. Holdem Manager 1.11 Collection Modification Memory Corruption
3. Holdem Manager 1.11 All Hands Function Memory Corruption


Vulnerability Details
=========================
=========================

All three issues have been reported to the vendor who had been 
given additional information regarding the issues. For the 
security of the players, we are not releasing any more details.

We would like to thank Holdem Manager's team for cooperation. 


Eleytt - Company Information
============================

Eleytt Corporation is specialized in penetration testing, vulnerability
development, advanced reverse engineering and exploitation techniques.
Eleytt provides various security-related services: risk assessment,
security policy, security assurance, incident management, web
application security testing, continuous security assurance programs.


DISCLAIMER
==========

This document and all the information it contains are provided "as is",
for educational purposes only, without warranty of any kind, whether
express or implied.

The authors reserve the right not to be responsible for the topicality,
correctness, completeness or quality of the information provided in
this document. Liability claims regarding damage caused by the use of
any information provided, including any kind of information which is
incomplete or incorrect, will therefore be rejected.